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Abstract The objective of this paper is to develop a functional pro- 
gramming language for quantum computers. We develop a lambda cal- 
culus for the classical control model, following the first author's work on 
quantum flow-charts. We define a call-by-value operational semantics, 
and we give a type system using affine intuitionistic linear logic. The 
main results of this paper are the safety properties of the language and 
the development of a type inference algorithm. 



1 Introduction 

The objective of this paper is to develop a functional programming language for 
quantum computers. Quantum computing is a theory of computation based on 
the laws of quantum physics, rather than of classical physics. Quantum com- 
puting has become a fast growing research area in recent years. For a good 
introduction, see e.g. |8I9| . 

Due to the laws of quantum physics, there are only two kinds of basic opera- 
tions that one can perform on a quantum state, namely unitary transformations 
and measurements. Many existing formalisms for quantum computation put an 
emphasis on the former, i.e., a computation is understood as the evolution of a 
quantum state by means of unitary gates. Measurements are usually performed 
at the end of the computation, and outside of the formalism. In these models, a 
quantum computer is considered as a purely quantum system, i.e., without any 
classical parts. One example of such a model is the quantum Turing machine 
|2I5| . where the entire machine state, including the tape, the finite control, and 
the position of the head, is assumed to be in quantum superposition. Another 
example is the quantum lambda calculus of van Tonder [13114] , which is a higher- 
order, purely quantum language without an explicit measurement operation. 

On the other hand, one might imagine a model of a quantum computer where 
unitary operations and measurements can be interleaved. One example is the so- 
called QRAM model of Knill [7], which is also described by Bettelli, Calarco and 
Serafini [Sj- Here, a quantum computer consists of a classical computer connected 
to a quantum device. In this configuration, the operation of the machine is 
controlled by a classical program which emits a sequence of instructions to the 
quantum device for performing measurements and unitary operations. In such a 
model, the control structures of the machine are classical, and only the data being 
operated upon is quantum. This situation is summarized by the slogan "quantum 
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data, classical control" . Several programming languages have been proposed 
to deal with such a model j.'illOj . The present paper is based on the work of jll) . 

In this paper, we propose a higher-order quantum programming language, 
i.e., one in which functions can be considered as data. In our language, a program 
is a lambda term, possibly with some quantum data embedded inside. The basic 
idea is that lambda terms encode the control structure of a program, and thus, 
they would be implemented classically, i.e., on the classical device of the QRAM 
machine. However, the data on which the lambda terms act is possibly quantum, 
and is stored on the QRAM quantum device. 

Because our language combines classical and quantum features, it is natural 
to consider two distinct basic data types: a type of classical bits and a type 
of quantum bits. They behave in a complete different manner. For instance, 
a classical bit can be copied as many times as needed. On the other hand, a 
quantum bit cannot be duplicated, due to the well-known no cloning property 
of quantum states |8l9j . However, quantum data types are very powerful, due to 
the phenomena of quantum superposition and entanglement. 

The semantics described in this paper is operational; a program is an abstract 
machine with reductions rules. The reduction rules are probabilistic. 

Some care is needed when defining a type system for higher-order quantum 
functions. This is because the question of whether a function is duplicable or not 
cannot be directly seen from the types of its arguments or of its value, but rather 
it depends on the types of any free variables occurring in the function definition. 
As it turns out, the appropriate type system for higher-order quantum functions 
in our setting is affine intuitionistic linear logic. 

We also address the question of finding a type inference algorithm. Using the 
remark that a linear type is a decoration of an intuitionistic one, we show that 
the question of deciding whether or not a program is valid can be reduced to the 
question of finding an intuitionistic type for it and to explore a finite number of 
linear decorations for the type. 

This work is based on the second author's Master's thesis |12| . 

2 Quantum computing basics 

We briefly recall the basic definitions of quantum computing; please see |8I9| 
for a complete introduction to the subject. The basic unit of information in 
quantum computation is a quantum bit or qubit. The state of a single qubit 
is a a normalized vector of the 2-dimensional Hilbert space C 2 . We denote the 
standard basis of C 2 as {|0), |1)}, so that the general state of a single qubit can 
be written as a\0) + f3\l), where \a\ 2 + \(3\ 2 = 1. 

The state of n qubits is a normalized vector in <8>™ =1 C 2 = C 2 . We write 
\xy) = \x) ® \y), so that a standard basis vector of C 2 can be denoted | r i nn ), 
where r i~ ln is the binary representation of i in n digits, for ^ i < 2". As a 
special case, if n = 0, we denote the unique standard basis vector in C 1 by |). 

The basic operations on quantum states are unitary operations and measure- 
ments. A unitary operation maps an n-qubit state to an n-qubit state, and is 
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given by a unitary 2" x 2™-matrix. It is common to assume that the compu- 
tational model provides a certain set of built-in unitary operations, including 
for example the Hadamard gate H and the controlled not-gate CNOT, among 
others: 

/1000^ 
\0 1 0/ 

The measurement acts as a projection. When a qubit a|0) + /3|1) is measured, 
the observed outcome is a classical bit. The two possible outcomes and 1 are 
observed with probabilities \a\ 2 and |/3| 2 , respectively. Moreover, the state of the 
qubit is affected by the measurement, and collapses to |0) if was observed, and 
to |1) if 1 was observed. More generally, given an n-qubit state \<p) = ao\0) ® 
\tpo) + ® IV'i): where \ip ) and are normalized (n— l)-qubit states, then 
measuring the leftmost qubit results in the answer i with probability \oti\ 2 , and 
the resulting state will be \i) ® \if>i)- 



3 The untyped quantum lambda calculus 
3.1 Terms 

Our language uses the notation of the intuitionistic lambda calculus. For a de- 
tailed introduction to the lambda calculus, see e.g. pQ. We start from a standard 
lambda calculus with booleans and finite products. We extend this language 
with three special quantum operations, which are new, meas, and built-in uni- 
tary gates, new maps a classical bit to a quantum bit. meas maps a quantum bit 
to a classical bit by performing a measurement operation; this is a probabilistic 
operation. Finally, we assume that there is a set U" of built-in n-ary unitary 
gates for each n. We use the letter U to range over built-in unitary gates. Thus, 
the syntax of our language is as follows: 

Term M, N, P ::= x\ MN \ Xx.M | if M then N else P \ | 1 | meas 

| new \ U\ * \{M,N}\ let (x,y)=M in N, 

We follow Barendregt's convention for identifying terms up to a-equivalence. We 
also sometimes use the shorthand notation (Mi, . . . , M n ) = (Mi, (M2, •••))■ 



3.2 Programs 

The reader will have noticed that we have not provided a syntax for con- 
stant quantum states such as a|0) + /3|1) in our language. One may ask why 
we did not allow the insertion of quantum states into a lambda term, such as 
Xx.(a\0) + (3\1)). The reason is that, in the general case, such a syntax would 
be insufficient. Consider for instance the lambda term (Xy.Xf.fpy)(q), where p 
and q are entangled quantum bits in the state \pq) = a\00) +0\11). Such a state 
cannot be represented locally by replacing p and q with some constant qubit 
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expressions. The non-local nature of quantum states thus forces us to introduce 
a level of indirection into the representation of a state of a quantum program. 

Definition 1. A program state is represented by a triple [Q,L,M], where 

— Q is a normalized vector of ®™=qC 2 , for some n ^ 

— M is a lambda term, 

— L is a function from to {0, . . . , n — 1}, where FV(M) Q W C V term . L is 
also called the linking function. 

The set of program states is denoted by S. 

The purpose of the linking function is to assign specific free variables of M 
to specific quantum bits in Q. The notion of a-equivalence extends naturally to 
programs, for instance, the states [|1), {x i— > 0}, Xy.x] and {z i— > 0}, Ay.z] are 
equivalent. The set of program states, up to a-equivalence, is denoted by S. 

Convention 1. In order to simplify the notation, we will often use the following 
convention: we use pi to denote the free variable x such that L(x) — i. A program 
[Q,L,M] is abbreviated to [Q, M'\ with M' — M^/xi] . . . \pi„/x n ], where 
i k = L{x k ). 

3.3 Linearity 

An important well-formedness property of quantum programs is that quantum 
bits should always be uniquely referenced: roughly, this means that no two vari- 
able occurrences should refer to the same physical quantum bit. The reason 
for this restriction is the well-known no-cloning property of quantum physics, 
which states that a quantum bit cannot be duplicated: there exists no physically 
meaningful operation which maps an arbitrary quantum bit \<f>) to \<fi) (g) \<f>). 

Syntactically, the requirement of unique referencing translates into a linearity 
condition: A lambda abstraction Xx.M is called linear if the variable x is used 
at most once during the evaluation of M. A well-formed program should be such 
that quantum data is only used linearly; however, classical data, such as ordinary 
bits, can of course be used non-linearly. Since the decision of which subterms 
must be used linearly depends on type information, we will not formally enforce 
any linearity constraints until we discuss a type system in Section^ nevertheless, 
we will assume that all our untyped examples are well-formed in the above sense. 

3.4 Evaluation strategy 

As is usual in defining a programming language, we need to settle on a reduction 
strategy. The obvious candidates are call-by-name and call-by-value. Because of 
the probabilistic nature of measurement, the choice of reduction strategy affects 
the behavior of programs, not just in terms of efficiency, but in terms of the actual 
answer computed. We demonstrate this in an example. Let plus be the boolean 
addition function, which is definable as plus = \xy. if x then (if ythenOelsel) else 
(if y then 1 else 0). Consider the term M = (Ax. plus x x)(meas(H(new 0))). 
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Call-by-value. Reducing this in the empty environment, using the call-by-value 
reduction strategy, we obtain the following reductions: 

— >cbv [|0), (Ax. plus x x)(meas(H p ))] 

— >cbv [75(1°) + I 1 )). (Ax. plus x x)(meas p )} 

/ [|0),(Ax.plusxar)(0)] J [ |0), plus 0] J[|0),0] 

~^ cw \[|l),(Ax.plusxx)(l)] ^ cw \[|l),plusll] ^ cw \[|l),0] 

each with a probability of 1/2. Thus, under call- by- value reduction, this pro- 
gram produces the boolean value with probability 1. Note that we have used 
Convention^ for writing these program states. 

Call-by-name. Reducing the same term under the call-by-name strategy, we 
obtain in one step [ |),plus (meas(H(new 0))) (meas(H(new 0))))], and then 
with probability 1/4, [ |01),1 ], [ |10),1 ], [ |00), ] or [ |11),0 ]. Therefore, the 
boolean output of this function is or 1 with equal probability. 

Mixed strategy. Moreover, if we mix the two reduction strategies, the program 
can even reduce to an ill-formed term. Namely, reducing by call-by-value until 
[-i=(|0) + |1)), (Ax. plus x x)(meas po)], and then changing to call-by-name, we 
obtain in one step the term [-^j(|0) + |1)), (plus {meas po) (meas po)], which is 
not a valid program since there are 2 occurrences of po. 

In the remainder of this paper, we will only consider the call-by-value reduction 
strategy, which seems to us to be the most natural. 



3.5 Probabilistic reduction systems 

In order to formalize the operational semantics of the quantum lambda calculus, 
we need to introduce the notion of a probabilistic reduction system. 

Definition 2. A probabilistic reduction system is a tuple (X,U, R,prob) where 
X is a set of states, U C X is a subset of value states, R C (X \ U) x X is & set 
of reductions, and prob : R — *■ [0, 1] is a probability function, where [0, 1] is the 
real unit interval. Moreover, we impose the following conditions: 

— For any x € X, R x ~ { x' \ (x, x') € R } is finite. 
_ Ex'ei?. x prob(x, x') < 1 

We call prob the one-step reduction, and denote x — > p y to be prob(x, y) = p. 
Let us extend prob to the n-step reduction 



if x 7^ y 

1 if x = y 



prob°(x, y) 
prob 1 (x, y) 

prob n+1 (x,y) — ^2 zeR ^prob{x,z)prob n (z,y), 



11/ \ I probtx, y) if (x. y) G R 
prob\x,y) = \ P I 
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and the notation is extended to x — >™ y to mean prob n (x, y) = p. 

We say that y is reachable in one step with non-zero probability from x, 
denoted x — >>o y when x — > p y with p > 0. We say that y is reachable with 
non-zero probability from x, denoted x — >*>o y when there exists n such that 
x — >p y with p > 0. 

We can then compute the probability to reach u £ U from x: It is a func- 
tion from X x U to M defined by prob(j(x,u) = Y^=oP r °b n { x T u )- The total 
probability for reaching {/ from x is probu(x) — J2^=o T^ueU P r ob n (x, u). 

On the other hand, there is also the probability to diverge from x, or never 
reaching anything. This value is prob oc (x) = lim„^oo ^2 yeX P r °b n (x 1 y)- 

Lemma 1. For all x E X , probjj(x) + prob oa (x) $C 1. 

We define the error probability of x to be the number prob err (x) = 1 — 
probu(x) -prob co (x). 

Definition 3. We can define a notion of equivalence in X: 



Definition 4. In addition to the notion of reachability with non-zero probabil- 
ity, there is also a weaker notion of reachability, given by R: We will say that y 
is reachable from x if xRy. By the properties of prob, x — >>o y implies x y 
with x y for xRy. Let us denote by — >* the relation such that x y iff 
there exists n such that xR n y, with R n defined as the n-th composition of R. 
Similarly, x — >*>o y implies x y. 

Definition 5. In a probabilistic reduction system, a state x is called an error- 
state if x £ U and J2 x 'ex P r °b(x, x') < 1. An element x e X is consistent if 
there is no error-state e such that x e. 

Lemma 2. If x is consistent, then prob err (x) =0. The converse is false. 

Remark 1. We need the weaker notion of reachability x y, in addition to 
reachability with non-zero probability x — >>o* y, because a null probability of 
getting a certain result is not an absolute warranty of its impossibility. In the 
QRAM, suppose we have a qubit in state |0). Measuring it cannot theoretically 
yield the value 1, but in practice, this might happen with small probability, due 
to imprecision of the physical operations and decoherence. What will happen 
if we measure this qubit and get 1? We need to be sure that even in this case 
the program will not crash. Hence we separate in a sense the null probability of 
getting a certain result, and the computational impossibility. 

3.6 Operational semantics 

We will define a probabilistic call-by-value reduction procedure for the quantum 
lambda calculus. Note that, although the reduction itself is probabilistic, the 
choice of which redex to reduce at each step is deterministic. 



x 



V 
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[Q,(\x.M)V] — n [Q,M[V/x]} 

[Q, if then M else N] — n [Q, N] 

[Q,N] [Q',N'] 
[Q, MN] ~ p W, MN'] W' lf 1 then M else ^ ~ ^ W' M l 

[Q,M] ^ p [Q',M'\ [Q,U{Pji,---,PjJ] — >i [Q'^ir.-.-.Pin)] 

[Q^MvP^QVl^y] HQo} + /S|Qi>, meas Pi ] — », a|a [|Q >, 0] 

[Q.Mi] — ->„ [gVflg] [a|Q > + /3|Qi), meas Pi ] — [|Qi>, 1] 

[Q, (Mr, M 2 )] [Q', (Ml, M 2 )] [g> ^ Q] _^ [Q ^ ^ 

IQ^t^mm [Q,ne W l]^r[Q®|l), P „] 

[g,(y 1 ,M 2 )]^ P [g',(yr,M 2 )] 

[Q,P] [Q',P'] 



[Q, if P then M else N] — > p [Q', if P' then M else N] 

[Q,M] ^ p [Q',M'] 

[Q,let (xi,x 2 ) = M in AT] — > p [Q',let (a;r,a; 2 ) = M' in N] 

[Q,ht (x u x 2 ) = (Vi,V 2 ) in AT] [Q, N[V 1 /x 1 ,V 2 /x 2 }] 
Table 1. Reductions rules of the quantum lambda calculus 

Definition 6. A value is a term of the following form: 

Value V,W ::= x \ Xx.M | | 1 | meas \ new \ U | * | (V,W). 

The set of m/we stages is V = {[Q, L, F] e S | V € Value}. 

The reduction rules are shown in Tabled where we have used Convention^ 
to shorten the description of states. We write [Q,L,M] — > p [Q',L',M ! ] for 
a single-step reduction of states which takes place with probability p. In the 
rule for reducing the term U{pj t , . . . ,Pj n ), U is an n-ary built-in unitary gate, 
ji, . . . ,j n are pairwise distinct, and Q' is the quantum state obtained from Q 
by applying this gate to qubits ji,...,j n . In the rule for measurement, \Qq) 
and \Qi) are normalized states of the form \Q ) = J2j a j\4'j) ® |0) <8> and 
\Qi) = ^2j(3j\<f>j) ® |1) ® \i>j)i where 0° and </>j is an i-qubit state (so that 
the measured qubit is the one pointed to by Pi). In the rule for for new, Q is 
an n-qubit state, so that Q ® |i) is an (n + l)-qubit state, and p„ refers to its 
rightmost qubit. 

We define a weaker relation This relation models the transformations 
that can happen in the presence of decoherence and imprecision of physical 
operations. We define [Q,M] ~» [Q',M'] to be [Q,M] — > p [Q',M'], even when 
p = 0, plus the additional rule, if Q and Q' are in the same vector space: 
[Q,M]^[Q',M]. 

Lemma 3. Let prob be the function such that for x,y € S, prob(x,y) = p if 
x > p y and else. Then (§, V, -^,prob) is a probabilistic reduction system. □ 
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Evidently, this probabilistic reduction system has error states, for example, 
[Q, H(Xx.x)] or [Q,U(po,po)]. Such error states correspond to run-time errors. 
In the next section, we introduce a type system designed to rule out such error 
states. 



4 The typed quantum lambda-calculus 

We will now define a type system designed to eliminate all run-time errors arising 
from the reduction system of the previous section. We need base types (such as 
bit and qbit), function types, and product types. In addition, we need the type 
system to capture a notion of duplicability, as discussed in Section EOl We follow 
the notation of linear logic jHj. By default, a term of type A is assumed to be 
non-duplicable, and duplicable terms are given the type \A instead. Formally, 
the set of types is defined as follows, where a ranges over a set of type constants 
and X ranges over a countable set of type variables: 

qType A, B ::= a \ X | L4 | (A -o B) | T | {A ® B) 

Note that, because all terms are assumed to be non-duplicable by default, the 
language has a linear function type A — o B and a linear product type A £g) B. 
This reflects the fact that there is in general no canonical diagonal function 
A — > A (g) A. Also, T is the linear unit type. This will be made more formal in 
the typing rules below. We write \ n A for !!! . . .!L4, with n repetitions of !. We 
also write A n for the n-fold tensor product A® ... ® A. 

4.1 Subtyping 

The typing rules will ensure that any value of type IA is duplicable. However, 
there is no harm in using it only once; thus, such a value should also have type 
A. For this reason, we define a subtyping relation <: as follows: 

, , /x t~r\ A<:B fr .s \A <: B m 



a<.a yu - L > X<.X K ' T<:T v ; \A<.B y ' \A<.\B 

M < Bi A 2 <: B 2 . . A<:A' B <: B' , , 
A x ® A 2 <: B x ® B 2 [ ® } A' ^> B <A~^B' 

Lemma 4. For any types A and B, if A <: B and (m = 0) V (n 1), then 
\ n A<.\ m B. □ 

Notice that one can rewrite types using the notation: 

qType A, B ::= ! n Q | \ n X \ \ n (A —o B) \ ! n T | l n (A (g) B) 

with n E N. Using the overall condition on n and m that (to = 0) V (n ^ 1), the 
rules can be re-written as: 

( Var l) m„. ZL imZ («) m-r Vmrr ( T ) 



\ n X <: \ m X v ' ! n Q <: \ m a y ' ! n T <: ! m T 
Ax <: B x A 2 <: B 2 A < A' B <: B' , , 



! n (Ai<g> A 2 ) <.\ m {B 1 ® B 2 ) y ' \ n {A'-°B) <: \ m (A^B') 
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A <: B , s A c <: B 

—. ; ^ [axil — — ( ax 2 ) 

A,x:A D> x : B K ' A> c : B ' 

ri,\A>P:bit r 2 ,\A>M:A r 2 ,\A>N:A, . 

— (if) 



Ji, r 2 , \A>if P then M else N : A 

ri,lA> M :A-°B r 2 ,\At>N:A 
n,r 2 ,[A > MN : B 



(app) 



If FV(M) n \r\ = 0: 
x:A,A>M:B r,\A,x:A> M : B 



Z\ [> Az.M :4-<B r, IA > Xx.M : {A -o S 

A > Mi : !zi, r 2 > M 2 : ! n A 2 



■2! 



\A, A , T 2 > (Mi, M 3 ) : ! n (^i ® ^4 2 ) 
!Afi >M : ! n (Ai ® A 2 ) !Z\,r 2 , xi:! n Ai, a; 2 :!' l ^ 2 D> N : 4 



J) A^T ^ 
E) 



\A,Ti,r 2 > let (asi.asa) = M in JV : A 
Table 2. Typing rules 

The two sets of rules are equivalent. 

Lemma 5. The rules of the second set are reversible. □ 

Lemma 6. (qType,<.) is reflexive and transitive. If we define an equivalence 
relation = by A = B iff A <: B and B <: A, (qType/=, <:) is a poset. □ 

Lemma 7. If A <: \B, then there exists C such that A — \C. □ 



4.2 Typing rules 

We need to define what it means for a quantum state [Q, L, M] to be well-typed. 
It turns out that the typing does not depend on Q and L, but only on M. We 
introduce typing judgments of the form A > M . B. Here M is a term, B is a 
qType, and A is a typing context, i.e., a function from a set of variables to qType. 
As usual, we write \A\ for the domain of A, and we denote typing contexts as 
Xi'.At, . . . , x n :A n . As usual, we write A, x:A for A U if x $ \A\. Also, if 

A = xt'.Ai, . . . ,x n :A n , we write \A = x\:\Ax, . . . ,x n :\A n . A typing judgement is 
called valid if it can be derived from the rules in Table [21 

The typing rule (ax) assumes that to every constant c of the language, we 
have associated a fixed type A c . The types A c are defined as follows: 

Aq = [bit A new = [(bit — o qbit) 

Ax = [bit A meaa = \{qUt~o\Ut) Au = [(qbit n -° qbit n ) 

Note that we have given the type [(bit — o qbit) to the term new. Another 
possible choice would have been [([bit —<> qbit), which makes sense because all 
classical bits are duplicable. However, since [(bit — o qbit) <: [([bit — o qbit), the 
second type is less general, and can be inferred by the typing rules. 
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Note that, if [Q, L, M] is a program state, the term M need not be closed; 
however, all of its free variables must be in the domain of L, and thus must be 
of type qbit. We therefore define: 

Definition 7. A program state [Q, L, M] is well-typed of type B if A > M : B is 
derivable, where A = {x: qbit | x G FV(M)}. In this case, we write [Q, L, M] : B. 

4.3 Example: quantum teleportation 

Let us illustrate the quantum lambda calculus and the typing rules with an 
example. The following is an implementation of the well-known quantum tele- 
portation protocol (see e.g. 8 ). The purpose of the teleportation protocol is to 
send a qubit from location A to location B, using only classical communication 
and a pre-existing shared entangled quantum state. In fact, this can be achieved 
by communicating only the content of two classical bits. 

In terms of functional programming, the teleportation procedure can be 
seen as the creation of two non-duplicable functions / : qbit —o bit ® bit and 
g : bit (8 bit — o qbit, such that / o g(x) = x for an arbitrary qubit x. 

We start by defining the following functions EPR : !(T — o (qbit <g) qbit)), 
BellMeasure : \(qbit —o(qbit — o bit bit)), and U : \(qbit —o(bit ® bit — a qbit)): 

EPR = \x.CNOT(H{new0),new0), 

BellMeasure = A(j2.Aqi.(/ei (x,y) = CNOT{q\,q2) in (meas(Hx), meas y), 

U = \q.\(x,y) .if x then (if y then Uuq else U\oq) 

else (if y then Uoiq else Uooq), 

where 

Uoo = ( u ?) ' ^oi = (J J) « U ™ = (I A) ' Uu = (-1 o) ' 

The function EPR creates an entangled state ^j(|00) + |11)). The function 
BellMeasure performs a so-called Bell measurement, and the function U per- 
forms a unitary correction on the qubit q depending on the value of two clas- 
sical bits. We can now construct a pair of functions / : qbit — o bit ® bit and 
g : bit® bit —a qbit with the above property by the following code: 

let (ir,2/) = EPR* 
in let f = BellMeasure x 
in let g = U y. 
in (f,g). 

The functions / and g thus created do indeed have the desired property that 
/ o g(x) — x, where x is any qubit. Note that, since / and g depend on the state 
of the qubits x and y, respectively, these functions cannot be duplicated, which 
is reflected in the fact that the types of / and g do not contain a top-level "!". 
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4.4 Properties of the type system 

We derive some basic properties of the type system. 

Definition 8. We extend the subtyping relation to contexts by writing A <: A' 
if \A'\ = \A\ and for all x in \A'\, A f (x) <: A' f (x). 

Lemma 8. 1. If x g FV(M) and A,x:A > M:B, then A t> M:B. 

2. If A> M:A, then r,A> M:A. 

3. If T < A and A> N : A and A <: B, then r t> N : B. 

The next lemma is crucial in the proof of the substitution lemma. Note that 
it is only true for a value V, and in general fails for an arbitrary term M. 

Lemma 9. If V is a value and A > V : IA, then for all x G FV(V), there exists 
some U G qType such that A(x) = \U . 

Proof. By induction on V. 

B <: \A 



— If V is a variable x, then the last rule in the derivation was R . . . 

—A ; X '. LJ X '. I-Tl 

Since B <: IA, B must be exponential by LemmaJT] 

— If V is a constant c, then FV(V) — 0, hence the result holds vacuously. 

— If V = Xx.M, the only typing rule that applies is (A2), and A = T, \A' with 
FV(M) n\A'\ = 0. So every y G FV(M) except maybe x is exponential. 
Since FV(Xx.M) = (FV(M) \ {x}), this suffices. 

— The remaining cases are similar. □ 

Lemma 10 (Substitution). If V is a value such that r±,\A,x:A> M : B and 
r 2 , \A>V:A, then A, T 2 , IA > M[V/x] : B. 

Corollary 1. // A, ] -A, x:A > M : B and T 2 , \A > V : \ n A, then r 1 ,T 2 , \A t> 
M[V/x] : B. 

Proof. From Lemma llUI and Lemma |SJ3). 



4.5 Subject reduction and progress 

Theorem 1 (Subject Reduction). Given [Q,L,M] : B and [Q,L,M] ~~+* 
[Q',L',M'}, then [Q',L',M'] : B. 

Proof. It suffices to show this for [Q, L, M] — > p [Q', L', M 1 ], and we proceed by 
induction on the rules in Table[T] The rule [Q, (Xx.M)V] — >i [Q,M[V/x]] and 
the rule for "let" use the substitution lemma. The remaining cases are direct 
applications of the induction hypothesis. □ 

Theorem 2 (Progress). Let [Q,L,M] : B be a well-typed program. Then 
[Q,L,M] is not an error state in the sense of Definition^ In particular, ei- 
ther [Q,L,M] is a value, or else there exist some state [Q' , L' , M'] such that 
[Q,L,M] > p [Q' , L' , M']. Moreover, the total probability of all possible single- 
step reductions from [Q, L, M] is 1. 
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Corollary 2. Every sequence of reductions of a well-typed program either con- 
verges to a value, or diverges. 

The proof of the Progress Theorem is similar to the usual proof, with two 
small differences. The first is the presence of probabilities, and the second is 
the fact that M is not necessarily closed. However, all the free variables of M 
are of type qbit, and this property suffices to prove the following lemma, which 
generalizes the usual lemma on the shape of closed well-typed values: 

Lemma 11. Suppose A — x\.qbit, . . . ,x„:qbit, and V is a value. If A > V : 
A — o B, then V is new, meas, U , or a lambda abstraction. If A > V : A® B, 
then V = (Vx,V 2 ). If A>V : bit, then V = or V = 1. □ 

Proof of the Progress Theorem. By induction on M . The claim follows immedi- 
ately in the cases when M is a value, or when M is a left-hand-side of one of the 
rules in Tablc^that have no hypotheses. Otherwise, using Lemma ITT1 M is one 
of the following: PN, NV, (N,P), {V,N), if N then P else Q , let (x,y)=N m P, 
where N is not a value. In this case, the free variables of N are still all of type 
qbit, and by induction hypothesis, the term [Q,L,N] has reductions with total 
probability 1, and the rules in TableQ]ensure that the same is true for [Q, L, M]. 

□ 

5 Type inference algorithm 

It is well-known that in the simply-typed lambda calculus, as well as in many 
programming languages, satisfy the principal type property: every untyped ex- 
pression has a most general type, provided that it has any type at all. Since 
most principal types can usually be determined automatically, the programmer 
can be relieved from the need to write any types at all. 

In the context of our quantum lambda calculus, it would be nice to have a 
type inference algorithm; however, the principal type property fails due to the 
presence of exponentials \A. Not only can an expression have several different 
types, but in general none of the types is "most general". For example, the 
term M = Xxy.xy has possible types T\ — (A — o B) —o (A — o B) and T 2 = 
\{A— o B) -o \(A^>B), among others. Neither of T\ and T 2 is a substitution 
instance of the other, and in fact the most general type subsuming T\ and T 2 
is X -o X, which is not a valid type for M. Also, neither of T\ and T 2 is a 
subtype of the other, and the most general type of which they are both subtypes 
is (A — o B) —o l(A -o B), which is not a valid type for M. 

In the absence of the principal type property, we need to design a type 
inference algorithm based on a different idea. The approach we follow is the one 
suggested by V. Danos, J.-B. Joinet and H. Schellinx 0]. The basic idea is to 
view a linear type as a "decoration" of an intuitionistic type. Our type inference 
algorithm is based on the following technical fact, given below: if a given term 
has an intuitionistic type derivation 7r, then it is linearly typable if and only 
if there exists a linear type derivation which is a decoration of n. Typability 
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can therefore be decided by first doing intuitionistic type inference, and then 
checking finitely many possible linear decorations. 

5.1 Skeletons and decorations 

The class of intuitionistic types is 

iType U, V ::= a | X \ (U V) \ (U x V) | T 

where a ranges over the type constants and X over the type variables. 

To each A G qType, we associate its type skeleton * A G iType, which is 
obtained by removing all occurrences of "!" . Conversely, every U G iType can be 
lifted to some *[/ G qType with no occurrences of "!". Formally: 

Definition 9. The functions f : qType — > iType and X : iType — ► qType are 
defined by: 

^\ n ot = a *a = a 

^. n X = X *X = X 

^. n {A^B) = ^A^>^B *(U^V) =*U^*V 

t!"(A0 B) = U x tfi *(u x V) = *U(g> *V 

t!«T = T. *T = T 

Lemma 12. // A <: B, then ^ A = ^B. If U E iType, then U = t*{7. 

Writing A ► M : U for a typing judgement of the simply-typed lambda cal- 
culus, we can extend the notion of skeleton to contexts, typing judgments, and 
derivations as follows: 

*{xi:Ai, . . . ,x n :A n } = {x\J A x , . . .,x n JA n } 
t(/i>M : A) = (M ► M : U). 

From the rules in Table it is immediate that if A > M : A is a valid typing 
judgment in the quantum lambda-calculus, then ^(Z\ > M : A) = ('A ► A/ : t^) 
is a valid typing judgment in the simply-typed lambda-calculus. 

We now turn to the question of how an intuitionistic typing derivation can be 
"decorated" with exponentials to yield a valid quantum typing derivation. These 
decorations are going to be the heart of the quantum type inference algorithm. 

Definition 10. Given A G qType and U G iType, we define the decoration 
U R-> A G qType of U along A by 

1. Z/S-> \ n A = \ n (U ^ A), 

2. (U =*> V) ^ (A -o B) = (U S-> A -o V <H B), 

3. (U x V) ^ (A (g> B) = (U ^ A (g> V ^ B), and in all other cases: 

4. U°r> A = *U. 

The following lemma is the key to the quantum type inference algorithm: 

Lemma 13. If M is well-typed in the quantum lambda- calculus with typing judg- 
ment r ' > M : A, then for any valid typing judgment A ► M :U in simply-typed 
lambda- calculus with \A\ = \T\, the typing judgment A S-> r > M : U <H A 
is valid in the quantum lambda- calculus and admits a derivation which has for 
skeleton the derivation of Z\ ► M : U. 
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5.2 Elimination of repeated exponentials 

The type system in Section 0] allows types with repeated exponentials such as 
UA. While this is useful for compositionality, it is not very convenient for type 
inference. We therefore consider a reformulation of the typing rules which only 
requires single exponentials. 

Lemma 14. The following are derived rules of the type system in Tabled for 
all r,a £ {0, 1}. 

!AA>Mi:L4i \A,T 2 i>M 2 :\A 2 
!AA,A> (M 1 ,M 2 ) : !(! T Ai®!M 2 ) 1 ' ' 

!AA>A/:!(!Mi»!M 2 ) \A,T 2 , Xl :\A x , x 2 :\A 2 l> N : A 

\A,T 1 ,r 2 > let (x 1 ,x 2 ) = M m N : A ' 

Lemma 15. If M is typable in the quantum lambda calculus by some derivation 
tt, then M is typable in the system with the added rules (<S>./') and (®.E'), by a 
derivation tt' using no repeated exponentials. Moreover, ^ir' = ^tt. □ 



5.3 Description of the type inference algorithm 

To decide the typability of a given term M, hrst note the following: if M is not 
typable in simply-typed lambda calculus, then M is not quantum typable. On 
the other hand, if M admits a typing judgment T ► M : U in the simply-typed 
lambda calculus, say with typing derivation tt, then by Lemma HHl M is quantum 
typable if and only if M has a quantum derivation whose skeleton is tt. Thus we 
can perform type inference in the quantum lambda-calculus in two steps: 

1. Find an intuitionistic typing derivation tt, if any. 

2. Find a decoration of tt which is a valid quantum typing derivation, if any. 

Step (1) is known to be decidable. For step (2), note that by Lemma [151 it 
suffices to consider decorations of tt without repeated exponentials. Since there 
are only finitely many such decorations, the typability of M is clearly a decidable 
problem. Also note that if the algorithm succeeds, then it returns a possible type 
for M. However, it does not return a description of all possible types. 

It should further be noted that the space of all decorations of tt, while expo- 
nential in size, can be searched efficiently by solving a system of constraints. 

6 Conclusion and further work 

In this paper, we have defined a higher-order quantum programming language 
based on a linear typed lambda calculus. Compared to the quantum lambda 
calculus of van Tonder [13114) . our language is characterized by the fact that it 
contains classical as well as quantum features; for instance, we provide classical 
datatypes and measurements as a primitive feature of our language. Moreover, 
we provide a subject reduction result and a type inference algorithm. As the 
language shows, linearity constraints do not just exist at base types, but also 
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at higher types, due to the fact that higher-order function are represented as 
closures which may in turns contain embedded quantum data. We have shown 
that affine intuitionistic linear logic provides precisely the right type system to 
deal with this situation. 

There are many open problems for further work. An interesting question 
is whether the syntax of this language can be extended to include recursion. 
Another question is to study extensions of the type system, for instance with 
additive types as in linear logic. One may also study alternative reduction strate- 
gies. In this paper, we have only considered the call-by-value case; it would be 
interesting to see if there is a call-by-name equivalent of this language. Finally, 
another important open problem is to find a good denotational semantics for a 
higher order quantum programming language. One approach for finding such a 
semantics is to extend the framework of Selinger 1 1 1 1 and to identify an appro- 
priate higher-order version of the notion of a superoperator. 
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